diff options
| author |   Amitkumar Karwar <akarwar@marvell.com> | 2013-10-22 15:24:45 -0700 |
|---|---|---|
| committer |   John W. Linville <linville@tuxdriver.com> | 2013-11-11 14:38:57 -0500 |
| commit | 2636c308fd720137d719c91da95adca2cd8f1c51 (patch) | |
| tree | bf60abf98eb45eb883656e2add8bee7acd989dfc /include/linux | |
| parent | mwifiex: fix invalid memory access in mwifiex_get_power_level() (diff) | |
mwifiex: fix invalid memory access in mwifiex_ret_tx_rate_cfg()
As tlv_buf_len is decremented at the end of the loop, we may have
accessed invalid memory in the last iteration.
Modify the while condition and add a break statement at the
begining of the loop to fix the problem.
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: Bing Zhao <bzhao@marvell.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions